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mm 

§>fe ^S-ZI^ol 7l*H|*H M ol olf ^ ol^^ 71 S^- tijog^ 7 }<g 

7> TROS] q^ty AjB^ ^ 7 fl ? lf A^H AjA^ #vg. # 7 1 ^Afl^ 

* ^ <*i^ a^js. *<4H3*h 91^ &^7}sL^ ^ai^ &* *1~8-*H 

7> ^^H. ^ tfl^7l^ ^ A^o} ti] ^ 711- ^^-SH 7><y^} ^ 

71 S. Mt4. 7><^7> ^t7l^ sfl^IEL « tfl^7l« *l~g-*H ^ &* # 

g A>-g-*M aJa^ *|12 J}3 41^ 7lS «H ^"71 ^€ ^-Jl*} 

3i, 7l^*H 7><97>% °l^*H *fl« ^4., 

^i^H, tfl^7l $ ^-7fl7l» AV-g-^ A^^ ^1^>S 7>^^> ^7lS. 

4. 7>^7>> ^7lfe tfl^7l^ Bfl^^l- AV-g-SH ^ *N^f tfltb ==r*8 

^<*(| 4^3, °1^ -2-^ Sl^ ^-8: A>-g-*V^ ^ EAP ^1^ el 

#31* 7fl3fl °1^* *|*^th ^-Ai^oflAi PDAS<^1 ^-g-^- ^ 5(31* J±<£^ 

S. 1 

olf^ TAKE, 91^ 71 32^ AKE, ?1 €^ ^ 
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°1 7l-s-nfl^l {TWO-FACTOR AUTHENTICATED KEY EXCHANGE METHOD AND AUTHENTICATION METHO 

USING THE SAME, AND RECORDING MEDIUM STORING PROGRAM INCLUDING THE SAME} 

5. l^r ^ ^Al^ofl 4f -JAKE lf£6lc|.. 

S. 2^ ^ ^Al^H 4^ TAKE A>-§-^ (^-f^T^^H^ ^ 

^ 91^ ^ ?1 ^(Authentication and Key Establishment :AKE) ISSfi ^ 

Jit} ^-^^ o.^^ ^E^, (wireless LANs), ^ ^^(public access 

wireless LANs) ^ ^l^H ?1 m^:(Two-f actor Authenticated Key 

Exchange :TAKE) o]» o}-g.^ 7 pfl (entity) ^ ?1 -M^* W Ji^r ^Wfe 

^sfl^l 91^ ^ ?1 "J-^H^ o.s. <y^§ o]-g-^ TLS(Transport Layer 

Security) s^^S.* °l-g-*r SRP(Secure Remote Password) ^ , EAP-MD5 »<H , 

Jl ^ aflr^S., 27}*|» JSL-Sf- ol-g-tt PEAP (Protected EAP), EAP-TTLS (Tunneled TLS) 
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PKI (Public Key Infrastructure) £ <d^i #3 Al^lH SRP^r 
^ o^xi-^=(2 exponentiation)^ .iL^H, 2-for-l guess attack^ ^*r4. ^ PEAP4 
EAP-TTLS^ MitM(Man-in-the-Middle) ^^1, Q^rA #4. 

EAP-MD5tt 4^1 (session) ^^"H ^r^°l 514. 

<5> (*^)^^oflX] PDAs(Personal Digital Assistants)* A>-g-^ ^-§-^- ^ 

Slfe- Sr^H. Sl-§:3 , ?1 802. lx^ EAP(Extensible Authentication Protocol) Sl^HH-S: 
7> &4. ^4*>^ PDAs^- ^l^r^K exponential on) 4 ^(inverse element) ?flA>4 
^ <3^* ^*Hr3] Al^Vo] ^o] ^(powerH ^l^M *1|£-°14. 

<6> ^ > ^ti>^ o.s. ^ (1) *H-*}7> 71^ *>fe ^(3fl^^-)4 (2) A r -§-*r7r 

7^2 Sife ^(S.€-(token)olM- ^ 7 }7})3\- ^o] 27 fl^ JL^7} 514. 
<7> O] *j-J2.cq sfl^JEL-i- ol-g-^V *&M£r <^S| 7> 
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1: 4 1 SlJL, 9)^3.3. SX\t% ^ (keystroke monitoring) -2.5. sfl^^7> ic« ^ 3} 
°1t=t. ¥ A>7l, ^ a>2] ^(social engineering)^ ^-2.3. 3xfl^ 

^H^s] (entropy)* 7 r *|uL ^(dictionary attack)^ ^^Wfe %°}^. ^ # 

(hot spot) *1<3<>1H *flH$|3. *l£.*Kr ^*1^ ^ ^ ^-^<^1 

t}jL ^ <r 53.4. 7}^^}* 4^3=3 ^l^Vfe EAP-SRP, PEAP, EAP-TTLS ^ °1 

^3 (dictionary attack)^ «?>^tb H.S.m#o]^- S>t|3^£. ^3*Hir .SLHiq-SHHH 7l^HS. 

<S> JEtb, (2)^1 £€"^14 ^71 711- ol-g-tg- rj<g ^ 61^ £3-4 £ft 

^•ir ^ &ir SJ^^H^S- ^Ui7l)7> ^JUs^fe 31^. ¥ ^*fl J^Sl ^> 

H USB(Universal Serial Bus) 7\ , zl^jl PDAs4 7)7] € *r S^. 4 

Ej.Ai f ^ ^aJMfe Sfi USB 714 ^ 71713. AVg-Sl-^ «*l S r ^3M» ^7>* r *l & 
o>£ SjJELS. til-g-o] ^o] s-x] £fe-tj-. tfl^ Hl^7l 7B<?1^ o]^ 4€ *m 

^§^.7> ^^^o> *>S-S., ^2=. -i-^ ^(temper resist ant )^^r 7\Q 

<9> ixj-sj-A-l, ^^oluf (^)^€ ^Hfe ^7lt iL^l-ofl filtt «1*B ^ 
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<io> © 4141 Ji±.( identity protection) : 5.^ 4 ^ (passive attack) £-3.^- 

3 7}<a*K client)^ Jissfe 7fl<&^ ^-41 (privacy)^- fl*H ^JL^. 

^1, DHCPCDynamic Host Configuration Protocol )5. IP *}-§-*H Tflfe -fi~8-^r 

<ii> (2) ^ ^(mutual authentication) : ^^^C attacker)!^ 7}<$^3\- Sl^Aj 

^(Authentication Sever) a>°W 3l*l*H MitM «^*8"§ nr ^l^l nfl«-6fl 7>^^ ^* 

(networkH rfltb ^"31 ^ja.*}^. 
<12> (3) 7] ^ : 7}<$z\!3t ^ A}<>H S^E]^ 3H^» S.^>7] 3*fl 4^ 71 

(session key)7> ^^H 0 ) tr^r. 
<13> © Forward Secrecy(FS) : S.5.S.-I-<*11 ^-afe 7^13} long terra secret keying 

material^ h^^^s. ^AAA °l3HI ^€ ^l'QA^El ^ ^1^ 7l» 7\]Q% *r & 
^€£1 FS7> ^l^J£|o^o> ^.4. o^^r FS^ half FS^r full FSS. 4^ ^ Stlfe^, 

7><g^ ^ i£ 7 pll^l 71 7} ir^T^S. *3*rte 5*1-71 4$. 7l» -fi-JE. 

«■ ^ ^^1*>3L, ¥ 7fl^Sl Wl^7l7> 2.^- ^-f^lS. 4# 7l7> 

<14> © ^.HB1-<?1 A}3l (off line dictionary) ^3°fl tfltr «V;8Hd : ^3*r7 r iLHS^ *>3i 

7>«a^ A-lttl^l «m ^^L» <£*1 **rH*r HlSf^r ^tUsH^ 
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<15> © MitM(Man-in-the-Middle) ' ^g-^H tfl^ : (^)-*Hd€ ^^^ife rouge 

APCAccess Point )M- rouge ^ NIC^: ^>-§-tr MitM^^H #|^ r H.5. *H tfl^ ^g-zH <£;&£|- 

<16> © Replay tfl^ : ^3*}7} A}-g-£ *J|Al*|«- ^fl^^H ^ * ?1 ^ 

<17> ® (efficiency) 

<ia> - <gxv «.§>^ 3^3* : (^)^M «34H PDAsofl ^-§-% ^ ^S.^ 3£r <3 
-Sr^g- A^-5>o^c> ^J-c).. zl^ji a>^ ^l^(pre-computation)^: ol-§-SH ^r^Kl (on-line) 7f| 

<19> _ b||X|^| %^s] : 13- jL^3f ^ *l<g (delay) ^ ^"t 

*4l ^^.(round) ^7> ^%°) &t±. rcj-eH 7}<$x\<% *>°H ^€*V 

<20> _ ^.xi rfl^s- a]~§-o} : SSSf 3.7]* 7>^tr ^TIl^M^ 

<2i> (D ? 1 ^-oi(key confirmation) : HS.S#<^| $-o*tr ^^Sl A>-g-7l-7> *HM $\S.^ 

*\)# 711- ^ij}£^g- ^-ol^o> 
<22> @ «.o] ^-^(non repudiation) : a>-§- ^ ^ ^ ^4 ^ cfl 

<>1eH tfl*M *r-§-*r7> ^-«M ^ ^31 71^-^1 *H^€ *r 

<23> £ «r3£r ^7li> ^^71 ^tr #.£.3., 27fl^ 

<?1 5fl^)nsq- cfl^ 7] (symmetric key) 7} <>l-8-*H 7>^^>* 
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°W 'f] H^r(TAKE) ^ ^ °1» ^4 n. iW^r 

<24> #7^ a.^^. ^^71 $m -g- ^ofl ^ 7] ^ ^ 

<25> -f^Aj ^-Sfl ^ A^ofl 7><S7> A^ Aj-Jr 

<26> a ) ^-7] 7 ^^|. r3-^7l7> Alt^S}- #7j X\Vi\Si\ ^. 7 fl7l» A>-g-«H A 3#^ 

?1» -9-71 ol^ X^S ^Aj^fe. ^Tfl; b) -*7l 7}<g*> ^7]7> #7l A^^M JQ$# 

^#*Kr c) #71 Aj-71 7>^7> #^7H -g^SM sj]^ 

= ^ rfl^7]l- A>-g-*><*| ^ OJ-JL^ &4 7}<a^ °1#7>» Aj-71 $1^ 

A^S *<S*Hr d) #71 7>«S^ ^7l7>, #71 ^Aj^ 7>^7>^ tl^H tfl« #7l 

^ Ai^oflAi^ Aj^ofl trfe^- #71 A^oflAl AjA^ A^^- ^Aj^ 

#3); ^ e) #71 7>^7> #^7l7> #71 ^1^7151- 3fl^i=» A^g-SH J$ 7 ] ^X\Q o]^ A^ 
^ °J^AH rfl^V ^*>al, #71 ^l^ol Aj^-sl^ ^ o. ^- 7 ] ols^ # «t 

<27> AJ-71 ol^ ^ ol^^ 7"| jj,^ Aj. 7l a) ^oj], Aj-71 7>SlA> ^^7l7> ^ 

^^a-i tfl^l7l ^el^l AH-^ #71 tfl%l7l^ #7l S^^*- £3«H #71 <^ 
^ ^-B-*Kr ^7^1; ^ #7l 7>^XV ^7l7V #71 <?}^ A^S}- 6J^. sj\% 7) JH^-fr 

*>Al ^ tfflofl *3#*H #7l-^i ^ sMr a>^ ^l#^ #7fl# 
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7 

<28> a\ 7 )*\ t #7] 7}<$7\: ^7]^ #7l tfi^M, #7j sfl^H. ^ #7) *7l|7l 

<29> # 7 ] a ) #741^, # 7 1 ^7] 7><£7>> #^71^ *\%X\S>). #7} 

<30> a^V, #71 c) #7fc, #71 ^€ dfl^S. ^ tfl^H tflSfl ^41 ^» 

A>-g-*H *fl2 H*r^ ^*Kr #31; #7l *l|2 ^ ^ a>**H #71 *lll ^ 

1^ ^^"SHr #711; #7l #71 »ll ^ &-jr A\-%-f>}*\ #71 7>^X>^ ^7|» ^ 

^*Hr #7fl; #71 4^71, #71 sfl^H., #71 tfiig?! ^ # 7 ] 7 >og^ rj^l^ ^ 

*H tfl*Mfl3 ^» ^B^H #71 7}<y*>^ ^^7>» ^*Kr #7fl; ^ #71 *lli ^-^ & 

* ^JlSRV ^4 #71 7>^^ ^1^7>* #71 ^ 7^3. <£41*Hr #711-1- 
<31> atb, ^71 e) #7fc, #7l 7>^^ Xfl^l, #71 sfl^H., #71 tfl^l £ #7l 9± 

^ ^7fl7H tfltfl n$ a>-§-^H *ll3 ^ ^*H=r #741; ^-71 

*fl3 ^ ^ #7l <^ A-lwls^-Bl 4r#€ ^ t^^t <&^*}7} ^1^1 «^^-» ^r#^V 

^ #7^1; ^ ^"71 *i|3 ^ ^ #71 ^ >A1^ ol^ A-^^ tl^>7> 

, ^"71 7>^7>1- #^T7l^ #71 91^ <&^°] ^€ ^^-S. #71 

oi^V* t4t°m #7)1» £tth=h 

<32> ig-^o] ^HM <^ -£Li 71 

<33> Jf.Al.g- Jf-Sj) 7}<$X\ #^7H1 #^ 7>1*H*I «#3L ^1** ^tb 711- 
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a) #7l A^7> #7l 7}<$X\ ^t7]oflA-1 # 7 ] *\*)*\ 

*M 711- ^#*Hr #3|; b) #7] A^7> #7l 7><y^> #^715.^1 ^€ 

^>-§-^ #7] 7><y^> *fl^|J= ^ tfl^7l^ #7} A^o^ ^- 7 fl7l« ^#^>J1, #^ 

» #71 7>^7> #^7l5L ^#*Hr #31; c) #7l ^ A^7>, #7] #^<>fl 

7l«H #71 7}<U*\ ^7H1a-i &4 7}<$x}^ oi^V* ^*Hr #31; d) 

#71 #^ A-lWl7> #71 #71 rfl^7l ^ #7l #^§- A^H ^ *fll ^ 

«m 715. *H #71 C) #31°^ ^Al^ oj-^ ^ 41*H ^12 ^ ^^.J7, Aj-71 

3l2 ^ 7l^H #71 7>^^ 0 J^H tfl$ ^W^, #71 

°J^1 #^fe ^4- #71 7>^^ <?1^7># lH-1-olir #31 1 ^ e) #71 91^ A-ltf|7> #71 
#71 Bfl^JEL, tft%7) ^ ^-7fl7l» A}~g-*M O]^ <y^7}# #7l 7>^7> #>£ 

715. <^l*Kr #3|# 

<35> ol o]^ 71 M% «^£r #71 a) #31 , #7l <?1^ A^ 7 >7> ^ ^ 

<M rfl^7l <£J[. ^21^1 A>-g-5l^ A>7l rfl^^l^ #71 3fl^^» #7l 7>^7> 

#^7l^ ^-^^ #31* D| 3^^. 
<36> e^H, #71 91^ Aj-7| tfl^l7l, #71 sfl^JE. ^ #7l ^ *\ *\ «\ Wl^l* 

tio> 4^ ^ CflolE-ltflloli tflo)] ^#§>^ ^ol tiV^-grV^. 
<37> #7l d) #31^, #71 ifl^H., #7l Cfl^7l ^ #7l #^4| tflSfl Sfl^ 

A>^V^ #71 ^ ^#*H= #7^1; #7l ^ SM- til^7lS. *H #7l 

4iL*H #71 312 ^ MSHf #31; #71 4M§€ ^2 ^ 

#71 91^ A^oj ^ #7l #^» A>-§--S}<^ Aj- ? 1 ^ A^^ ^7l» #31 J 

#71 A-11A171, #71 #71 tfl^7l * #71 7>^X> #^71^ ^^^Hl tfl-gfl «fl 
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^ #7l &4 #7l ^Aj^ 7}<$*\n 9l^}7\ ^tb 3^, #7} 7}<g*H tfli& 

^^s. 3M2*h #71 7>^^ ^i^m ^Vl^lfe 

<38> SEtb, #7l e) ^TlHH #7l ^ <&^7} ^Ajofl #7] ^A^ o}^ Xfl^ 

71 7> A}-§-3^ ^o] W>^1s}tf. 
<39> SE-^, Aj. 7 ) a ) ^TlHH, #7l 7V^7> ^7^ '^^^7> 4^ 

7l -^sfl NAI (Network Access ID) A}-§-sHr ^-f, #7l 7>^7> ^7l7> A}-g-*} ^- 

^4 #7l o]^ a^^I ^7fl7ll- tfl^tt &4 O]^ Aj- 7 ] 91^ A)*\3_ 

<4o> a. S tj-s. ^PS^l ^ °1^ IL±. 9l^Q 71 S^r f^-i- ol-g-tb 91^ «<^£r, 

<4i> <s«4^ i^lHCAccess Point)* ^ 7>^7.> ^^71^- <^ a^7} ^€ ^ ^ *1 

#7l 7>^^> ^T^T^l^f #7l 9l^ A^^Vofl o]^ Ari <?1^€ 7] Jg-*H #;£ 

<42> a) -^7] 7><a^l- ^:^:7l7> #7] ^/-fli 3L<yBiM^ A33-§- «fe #7il ; b) #7l 

7}<%X\ ^7}7\ 7>A1^ ^X}2\. ^7} 9l^ *\V]4\ ^-7B7m A>-g-§>^ ^A^ ^ #7) oj}^ 

^ i^H* ^ #71 91^ *\v\*L c) #71 91^ *\*\7\ #7l 7}^a> #^71 

S-^-Bl =^A1^ 71^. A>-§--§H #71 7><yA]- 3Jj)^H ^ «m7l^ #7l <?}^ A^o} ^- 7 fl 

7l» 3t^L, \+^r» #71 5L<?1H.» ^ #71 7><^A> ^7lS. ^^Kr 

^741; d) #7l 7>^7>V ^7l7> #71 ^.7] sfl ^ ^ tfl ^ 7ll- A>^>^ ^1 

^ ^ ^sl-^ ^ ^S#^ 7><^A>^ ^I^aVI: #71 ^^1^ 5L^1H» ^-n #71 ^1^ Ai 
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iflS ^4*Rr e) ^71 *\*\7} 4-71 afl^H., 471 tfl^y] $ 47I ^» ^V§-*V 

<3 ^12 ^4 ^ «m 715L «H 47l d) #3HH oJ-J:^ 4 

71 4s€ 3H1 7li*M 471 7 r <S*r^r ?1^H tfltt ^fl*Ka. 471 W>1 

4^fe ^4" , 471 471 Sfl^^-, tfl^^l £ M^l'* A>-§-^ AJ4^[ ol^ A^^ oi^> 

• 47l ^ 471 7Vs3t.> ^7ls. ^4*}^ f) 47l 7}<a*> ^7l7> 

471 4-g-*H 471 Sl^ ^^Hl tfltb 4^r^L 

, ^ 91^ 471 *M1^ 3Eoie # 471 ^ x^s <£4*Kr #741; ^ g) 471 ^ 

^ ^«17> 471 7><gx> ^7laJ?-^ $1^ 43J)-7> i+Ej-Td: 3^ 471 7}<g*Hl 

tfl^r ^ SJ7M- 471 ^^li ^--gfl 47l 7>^A} #^7lS. #31 » 



<43> <^7H, 47I 7>^7> ^71^ 47l 4°l1^r ^4 7}^ ^ S.i 

-^(Extensible Authentication Protocol :EAP)°l 4-§-3:n., 47l <%*\}^ S.9l^ 47I *\ 
v] a\c}o\}x\^ radius 5.s.s#ol aMJ-s^ wl-^-^^tq-. 

<44> o>sflofl^fe ^Jf^ JE^-g. §H ^ ^xg^ ^AHofl tfl^ 4**}fe- 7l 

^ *°WM *l4^r ±*WA 44% *r 9Xsm 4^1*1 as|v+ 

^£ ^B] 7 r *l 4°ltr 33)3. *r $31^ 4^*Hr 4*HH tb^3*l 

-B-A>^ Jf^-ofl tfl-gflA-1^. 5:^ Jr* 1-^4. 

<45> ^ f jg. Tg-Tg^ 4a]^6)1 nf= TAKE l^Sff ol-g-tb ^ *fl*H 4^1^>7ll 4 

^ £. i£ -g- ^sl 44 ^-E- TAKE H.s.s-1-sl ^-g-soit}.. 
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<47> 5. i^- & ^]o|dfl ttfs. TAKE tflflfl -£^i5|-7l ^ 



<48> A : 7><a^K supplicant client) 

<49> B : 91^ ^(authentication server) 

<50> % : 3(1 

<5i> t : tfl^^l <$3L*\)*] a>-§-e1^ tfl^l^l 

<52> ID A : 7}<%x} A^ ^ identifier) 

<53> E K { >,%{}: tfl^] RS. tfl^lsL ^-J:^- ^ 4S5j- 

<54> H ( ) :. *fl3t^ 

<55> s k A : A7> *\]& 7H session key) 

<56> n ; 3. 



<57> 



q : (p-1)^: M"¥fe €• <r 



<58> . 

g : ^(order)7> q<*l €^<*1 

b, Amod p) : *\*) ^3 (static) »1 D ^1, 



<eo> tq-^-, £ l-i: ^-SS]-^ , ^- ^U]oHl TAKE ES-Sfs] 

(enrollment) #31, A r €3l#(precomputation) #7l] ^ -M ^^5. 4 1 SI 1 }. 

<61> ^i, ^ i« -£^4. 
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<62> 7l-<a*KClient A), -M^-S^fe 7>«g^ ^ #^71^ ^(Server B)fe 3DES(Data 
Encryption Standard)^- Rijndael4 ^ tfl^l^ ^-Jl <g5LB\^ tfl^^Kt)^ sfli 

q-1] $33. ^ <b>» i>llolBltiflc,l^( D B)ofl ^^Jl, 7>^7>H^1 >H 

«13 ^7fl7l(^)^ £^11^ 4^1^(P, q, g)» ^^4. 7H3*Kr tfl^Kt)* Wfl 

0>^^- ^ofl T^S)^ S}i=. 6}im. 

<63> t}^-, A>^^AV( P recomputation) ^TIH tfl^fl Aitg^t}.. 

<65> 7}<y*H ^-Ai ^7lfe- ^ vJlH^lat A}-g-S}X| ^ «] A]^(idle timeHM- ^71 

43 ^r(power on)Al6jl a}^!^ ^th}. s 1^1 £a]^ w><^ ^o] , 7><3*} [1 ~ 
q-1] *33H $33 ^ *» Ai^^. ^, 7><y^fe $33 ^ xe ^ z *» Ai^tb ^, 

Ai^ $33 ^ A>-g-^ g\ g bX =C(o)3fL mod p )^ A^lA^t}. 

<66> x^g-, ^ #?)H tflSfl -S^^tf. 

<67> O] ^ ^ 7^) $^l)- ^A} 71 AJ^^- ^*|^ ^741S 4^-4 ^ €^>S. 

<68> © 7>$7]- A^r ^Bl^om (^)^Aj^ Ai«l^ 3*fl 7.1-Aj^ ID A £q- $^ 

Aitf| B3 ^71171(^)1- sfl^tb H^Da, g 6 )# Ol^ A^ B^lTfl ^tf. 
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<69> n>«g f 7 }<£t\. ID7]. ^gig 3*8 4^ *l€*}7l NAI (network access ID) 

^-f, M 7><a^> ID7> user id@realm. cornel A>-g-*} o]S- 3fl 

3tb UtSi HCuserid, g 6 )^ o]s. ^ ji^t}-. 

^ © H(ID A , S b )% °)^r 7}<$x} 2L<& ^ ^ °l>i(DB)«IH 

<H(ID A , g*)>, <ID A>> <%>, <t>, <b>» ^#«B ^ >W [1 ~ q-1] 1i$H 9X 

<7i> © 7><£*1- A^r *\*\ B7> iLxfl^r <3^sq ^ r& ^«>^, it ^ *}-8-*H 
Sfl^-fc & f=H(r, it, t)» ^, °1 f» tfl^^l #3L2^r^r tfli^lS. A>-§-*H 

e = Efig*}^ ^xj:^. ^^1, c, £ r« 71 sk A =H(c, , r)» 

^xj-tb ^ it , t $ ID A * sfl^ltr #tl Sl^r M A =H(sk A , it , t, ID A )* 

<72> 7><g^> <#7] ^M§^ e ^ M A » $1^ B^Tfl J±^. 

<73> © 91^ *\*\ B^r 7><a^> AS^-B) e^- M A » r, % ^ t» *V§-«H 

«H f=H(r, it, t)* 7)^, ^€ e» #7] Tfl^ fS. 43^*H g*= Me}^. 

<74> -x x b 

^ A >-§--&H skB=H(c, r)» ^l^Val, °H*i H(sk B , it, t, ID A )« #71 ^ 

€ M A 4 *13 ^Hb^. ^ 7fl^ 7><a^> A«fl tfl-^r *1^8r 

^^•^ol^A-l 01^ Bfe 7}<y*r A^-Ei ^a]^ M A » %o}^-<?14. B^ 

M B =H(sk B , it, t, s b m 7>^ava^7)i 
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<75> 



© *\*\ BJsL^Ei ^ai^ M B 4 *KH ^mtt H(sk B , it, t, # )7> ^- 

^tt a^l- ^A^cf. n><g t ^. 7 fl^ £ol ol^ ^ B6)1 ^ ol^o. 

^^"1^1, 7><g^> Afe M B » ^>»^4. 7}<$x} a^ B7> M A ^- M B » 

<77> £ 2 # ^-S^, (^)^-Ai^ ^ i^lSCAccess Point )(200)» *«fl 7><y*} 

(Supplicant Sfe ClientXlOO)^ A^(Autnentication Server RADIUS Server)(300) 
7> ^slM 7>^7K100)^1 tfltb oi^ a-^(300H ^ <H8€^. 

<78> <37H, 7V<g*}Q00)2r 5L<&B(200) ^H^Hfe ^ 7}^ 91^ 

(Extensible Authentication Protocol :EAP) 0 ] A^-g-sjai, ^<?lH(200)3r a^(300) 

4°li^^ RADIUS £££fol A}-g-^r4. 

</9> atb, 7V^7>>(100)^ ^^7l(t), 2fl^JE.(7t), ^ A^(300)21 ^-7B7l(/) ^ 

DH(Diffie-Hellman) S.^<Q q, g )» 91 ^ , 91^ a^(300)^- rfl^^l 

(t), sfl^JELU), A)ttK300)3l ^-7fl7l(^) ^ DH(Diffie-Hellman) 5L*fl<y s|-e)-pfl E^(p , 
Q. g)^H a^ ul^7](b)» a-^Kh 
<80> ^ > 7><a*K 100)7} (^)^-Ai^ = cq A^xr <*\M}^ S.91B. 

(200)fe- 7}<y*}(l00H7fl E}<y l(identity)^ 7>^1 EAP Jl^ (EAP-Request/ Identity )# 
(S100) . 
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<81> ' b 

7}«g*Kioo)fe ida^ tl^ ^^(300)^ ^7fl7i(f )* sfl^tb 

H(ID A> g 6 )s. identity^. EAP -§-^(EAP-Response/Identity H ( ID A. ))-|- ^M]^ i<&H 
(200)3. ^^t)-(silO). 

<82> ofl^^ 5L<^S(200)^ 7}<y*K 100)3.^ identity* 91^ *\*\ 

(300 H tfl$ A^CRadi us-Access-Request (HODa, )))^ 2±^tKS120). 

<83> £ 

*W300)fe ^Afl^ 5L<?lH(200)3.^-B) H(ID A , g )ofl 7]^H ^£ 

tilH^H <id a >, <*>, <t> ^ <b># 3#*fl ^ «9^3 & re * Z *^- <*WM 3^ € 

#(Radius-Access-Challenge)£-3. 6 ^]i 5L^lH(200)^l7fl £.ifl^(S130), 0 44i 
(200)^ o) r ^ TAKE ^JiE^Ksubtypel) °-3. *H EAP (EAP-Request/TAKE subtypel 
(r)M; 7><a^-(100)^|7fl ^tt^(SUO). 
<84> 7>«a^|-(100)fe- *W300)«1M S.vfl-$r & r-i- ^*}^, it ^ t^ * 

*n *}-§-*h & f=H( r> it, t>» 74i^ °i f* tfl^yi ^s^Hr «m ?i 

S- e = Ef{ ^ } » ^^tf. ZL^Jl, c, ^ £ Afl-S sk A 

=H(c, r)» Tfl^ ^ « . t ^ ID A » *fl3tb ^1^> M A =H(sk A , it , t, ID A )» 

«H, e^ M A » TAKE ^ i<*j| tfltb EAP -§-#(EAP-Response/TAKE Subtypel (e, M A ))^- <*H1 

^ 3. ^(200)3. Jivflji(S150), °A*\)^ 3.alH(200)^ 7}^ *K 100) 3.-^3 ( e , M A )-ir 

i^fe ^ JEL^ (Radius-Access-Request (e. M A ))^r <M«K300)S H^t^(S160). 
<85> 4^-, tl* -*W300)^r 7V«B*K100)3. J M ^ai^ e ^ M A « r, it ^ t« 

*M f=H(r, it, t)» Tfl^V^. e* #7l 7fl#€ f3. ^s^H 

g* = D f {e> # T^tf. zl <^ *W300)*r ^-71 ^-^fl^l bl- c = g xb m 
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TflX]^ 3?L t c 4 r ^r ^tn *>-§-"&H sk B =H(c, r)» ^1^2, o]^^ H(ske, it, t, ID A ) 

7V^^K100)^1 tflff- *}^-8r ^^o]^^ A^(300)fe 7>^7>(100)S.^ M A » ^ 

o>l-ol4. zl^JI ^ ^(300)^ M B =H(^ ( it, t, #*)» T^l^H *H*1*1 
(Radius-Access-Challenge (M B ))3. 5.SlB(200H?ll iL^i} (S170) . 

<86> oji^a 5toiH(200)fe <?1^ ^(300)3.^ M B » TAKE ^ 2(subtype2)5. 

«H EAP iL^(EAP-Request/TAKE subtype2 (M B ))^r 7><y *Kl00)ofl ?fl *l^^KS180). 

<87> 

4^, 7Bj7>Kl00)*r 91^ *\*\ (300HH M B * *H4*H *KH H(***, 

(200H tfl^V 7^^(100)^ m b » Mt°J4. 7><a^>(ioo) 

Q <?1^ ^(300)7} M A ^ M B » AA ^Vl^, 7><y7.]-(100)sq- a-^(300)#£| #31 

<88> 4^-, 7>^x1-(l00)fe- ^<?1 (acknowledgement )» TAKE AiliB}-^*)] tfl^V EAP -§- 

^-(EAP-Response/TAKE Subtype2)^ <^M}^ 5L<?}H(200)3. ^31(S190), 3L<?lH(200)fe- 
7V < y*Kl00)3.^-B| 3L^Kr ^4? JL^g (Radius-Access-Request )-§- ^ ^tf) 

(300)5. H^tq-(S200). 

<89> o]^ a^(300)^ q AM}^ a^lH(200)l- ^ 7}^H 100)3.-*f£} iL^£- ^7} q 

$4* *1 (Radius-Access-Accept )♦ OJ Hl^ S^lS(200)S ^^(S210), °A 

A}^ 3L*lH(200)^ o) ^sfoj] 14^ EAP ^ (EAP-Success)l- 7><y7;>( 100) oflTfl 
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^(S220), a-1 131(300)3.^ ^-g-o] sq&^Hr ^ <£?)7) ^-gfl EAPOL-Key *fW*]» 

^r^KlOOHTfl ^.^cf(S230). 
<90> o^W, 7>^^}(100)4 5L<?lB(200) a>o]<>|1 ^sj^- p)W*1 3ife ^^#^1^ 

LAN =S£ft ^f-t!: EAP ^s|-(EAP encapsulation over LAN protocol :EAP0L)7> a}-§-^t}. 
^ ^7}^ w]-^ £o) t M. j£X\<$d\] n|-s TAKE ES-Sft ^-g-tt ^ #3 

°fl TAKE ESSfl- ol-§-tb *<HH tfltb ^4 ^4. 

^ © iLJl( identity protection) : 7}<y*Hf- ID JS^-fr *R1^ ID A tfl^H 

H(ID A , g*) # S.^7,}^ ^ ^3 7.>(pass ive attacker)!^ 7}<Qx}*\ 

<93> (g) 7^^- ol^ : 7}<$z}^ )^ ul^Kt), ^-HIjO. ^ ^- 7 fl7l 

( g6 )» °J^*r M A 1: -fr51% ^ $H 7><a*> °J^-& ^ Sll4. tr^, Sl^ *H*r 

^^ = (it)^ «m^Kt), 7><g*} ^*r(ID A ) A^o} ^ ^] ( b )» <£o}-0> M B » ^ 

<94> (3) ?1 ^ : 7>«a^ ^ a^ A>oloflA-^ rfloTEi ill *\]& 7l(sk A , sk B ) 
7> ^l^lfe €^^4 (freshness)* A 

(dynamic) "3^^ ^ x^- r^ A^ofl 7 ]^%x^. 
<95> © Forward Secrecy(FS) : 7\^^}7\ v)^ <ID A >, <%>, <t>, < 
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S b >7 \ *3*H>H ic#s)^* 3-$- ^3*Kr e 4s*H *rfe 

c = ^^ DLP(Discrete Logarithm Problem)^] TflAV^M <H^. 3=tt\ a^o] 
«m *1 <b>7> ^-f<^ c = ^^r*V7| 8*m <go\o\ ^ <£ 

7l ^«fl^fe <ir> ^ <t>» ^, ^3*H=- <b>, <%>, <t>» SL^ 4 

^i.7> ^THlTfl 7>^^r ^ %<L2. ^^€4. TAKE ( 

^sO^Hd^NH^ iM^Sl half FS^lJitffc (practical) half ¥S^3. M ^ $X 

A. 

«*> © SLZ.y%<& A>^( 0 ffline dictionary) ^3 : ^^7.>»^ A^^o] <>l^°fl 

^iL*^r ^71 a}# a]£§ ^ ^cf. ^SS.^7> 3£ ^^JE.^- o] 

3^ *r XI^M-, TAKE^a^ s.a.6fl a-^€ ^BS.^7> ^ ^71^ sfl^JE. 

. 7> & g '» ^S^Kr A>-g:5)^S. A}^-# « 7 >^>4. ^, 

^3*}i=. ^i^nfi). riejzi <y<£|<3 # g X y}7) ^^H 6 > 

^ © Man-in-The-Middle(MitM) ^*\] tfl-fc : ^3*}*^ 7}<a*><4 a^ A>o-|ofl <fl 

*1*H MitM ^flU *r 9XA. =l^A TAKE 6 )] *\ ^ Q W 

<98> © Replay tfltt : Replay ^3* r 7> a}-§-^ 7.fl 

. ^ 7l« tfA] -g^r^ ^3 H ^^t}. TAKE^Ai^ 7>°g7.>^- Ai^ 7 > Xfl£ tn>rf 

^ x <2}- r^- zfzf a^-&H ^ 7l» Aj^^ 7 ] ttfl^oll replay *2H 
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® SL-i:^ (efficiency) 

ioo> _ ^av : DH(Diffie-Hellman) FS» afl^ ^ Si^l nfi-g-<*fl 

^ ^ 7l ^M^(AKE) ESSfl^i ZL $X*) x] ^(exponentiation) Tfl^^r -S-^ 

&o\) o^AVofl iA^^ cfl^-^ X| ^ sK exponent i at i on) ^ <*j€ ^}X\- t zl^JL 

^3. ^1, PDAs^l^i-fe- Q^ 0 ) ^>^m 4i 

Tfl _£.5.€£KHH^r A}^7^(pecomputation)iL3. 2«i^ *|^. Tfl^M: *r^r €3135$ 

aoi> _ pjj^^i ^^St : TAMHfe 43}£| sfl^passW 7>^*}s>]- 

<102> _ tfl^S. A>-g-^ : 57fl^l ^ 37fl^ #3 «1S ^^31, 7fl 

<io 3 > (D 7 ] ^-^l(key confirmation) : TAKE^H^ o}^*} M a ^ Mb^I 4*1 ?1» S.^]^ ?1 ^ 

*m 4^ ?1« ^-n-*r&^ *r Stl^. 

<104> @ ja.01 ^( non repudiation) : TAKE<M t^lH *\*$ A >-§-*r*l *5*^^r 
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107> £ ^-tgojj rq-e^, o]^ *V8-*H *W ^ EAP HH^** o) # 

:i08> gc^ ^ ^^oflA] PDAs<^ *r &-§: ^^S. SL-Sr^-i: 7V^rf. 



35-23 



0^^42611 ^ 2004/7/5 

M-*WW4U 
WW 11 

0.0^ ^.Al jg.gjj oi^ A^ofl 7}<$7\ &t£7)*\)*\ #Ji. <?1^§- ^ jafl: 

a) #7l 7><a^V #^7l7V 7R1^ #7l ^ ^7fl7ll- A>^>^ 

7i» #7i a-i^s. ^^l^ #31; 

b) #7l 7>^7> ^7l7> #7l ^j^MH \*^T» T^Hr #7fl; 

c) 7>^7> ^7H PlBl -g^SM flfe afl^H. $ tfl^7] 

§ a}-§-*>^ *|i if-^ #3:3^ &4 aJ#^ 7><a^ <^^>» #7l o]^- a^jl ^fS\r 

d) #7l 7>«^7> ^7l7>, #71 ^€ 7V^7>^ ^l^H tfltb #7l *\ *] <*i| *\ ^ 

W% rtt^t #7l ^ *3#^ Si* ^^Hr #31; ^ 

e) . #71 7}<£7\ #^717} #71 ^1^71^}- sfl^H.* AVg-*M #7] *H4€ *\*\^ 
cl^ofl tfltb ^^^31, #71 o)^o) s$^5\!=: 7$+ #7l A-^^ Si**}* 
*°l*r r^l 

» S^fe °1* -S.^ <*1*^ 71 S^; H^. 

WW 2] 

#71 a) #31 
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#7l 7}<$X\ ^7)7} ^ ^oflA-] tfl^^l ^aiej^l AV-g-S)^ Aj^ tfl $ 7} Q #7l 

#71 7>«a^> ^7l7> #71 ol^ A^^ dl^.fl^t 7] 5L«rfr 4^*}*1 *W \J 

^#*H #71 ^ A>^ ^A>^ 

♦ Cl 3L^-*Hr °W $L±. 7} 
3] 

#71 7>«g^> St7]b #71 tfl^7l, #71 sfl^JE. ^ #7l ^ ^ 7 fl^« 

^ *i#*Kr 33* ^ o]^ 7 ] 

l^T^ 4] 

^11^ SL^r >112^1 XJt°H, 

#71 a) ^HlAi, 

#7l 71 #71 7><ax> ^71 Si #17}- <4 #71 *\tfS>\ ^7fl?H U 

W AV-g-^c^ ^Ajsjfe. f^O S ^ O]^ 71 3L§ 

5] 

#71 c) ^-^m, 

#7l ^Al^ Aj- 7 ] afl^^ ^ tfl^Hl rfl^fl *fl3 TK*» A>-g-^H z\}2 ^ & 

* ^*Kr #31; 
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#7l *H2 ^ &-$r A>-g-^H #71 *fll ^ ^ <g-21^>fe #7)1; 

#71 #71 *lll Jp§ ^ AV-g-^-C^ ^-71 7><y^ 4^7|» ^#*Rr #711; 

#7l A^7l, ^"71 #7l ^ ^"71 7^7} #^71^ #f*Hl $\ 

n n# *i~§-*h #7i 7}<y^ °i^7i-» ^*Kr ^ 

#7l T^U ^ #JL2^ #4 ^-71 7>^7-}^ #7l A^S. ^*Vfe 

♦ i^Hfr °1^ 71 M% 

6] 

#71 e) #7^, 

#71 7\<$X}^ #71 sfl^iE., #71 tfi^l7l ^ #71 <?1^ ^7^M « 

n$ f-^r* *H-*H ^13 ^ ^ ^#*Hr #7)1; 

#71 ^3 ^ &4 #71 7^3.^ ^1^^- ^1^}7> ^Q^: 

^1^ ^r^}^ cj^l; ^ 

#71 *fl 3 S.^ ^ #7l <?1^ A^S^-Bl ^ tl^7>7> ^^^r 

3^, #71 7>^^> #^7lSl- #71 91^°} ^^-S ^r#^>^ #7l X\ 

» 5^}^ °1^ 7l JH^ 
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WW 7] 

71 » ^ai*h=- ^741; 

b) #7] *\Vi\7\ #7] 7}<$7\ ^7)S.^ ^€ ijt-ir *1~§-*H ^"7] 7>^7.> 

C) #7l ^ ^^7>, ^"71 ^€ 7l^H ^"71 7}<£a} ^711^1 # 

3-$- ^4 7}^7}^ ^1^>» #31; 

d) ^7} 91^ ^71 sfl^S., ^^71 ^ -^-71 AV-g-isH 

If-^ &-jr W]^ 715. S}<*| Aj-71 c ) ^T^HIA) oj-jrj^ ^ ^SLf>}d\ 7^12 ^ ^3 

*>J1, ^"71 Aj^^ ^2 J}3 3H1 71^}^ ^-71 ^Aj^ 7><aA>^ ^7}6\] tfli£ Sl^-S; 

*Kn., ^-71 ^l^oi a^s)^ ^-71 7><y7}-^r Sl^*}* ^H.}!:^ ^7^1; ^ 

e) ^7l 91^ AiWl7> ^-71 ^"71 ^^71 ^ ^7fl7ll- A>-§-*H A S^€ ^ 
A^^- <y^7}l; #7) 7}<$7\ #^7}£. ^ 

1- S.^}^ 71 

8] 

^-71 a) ^741 £4| , 
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W?* 9] 

<#7) °l^r ^7} r%%7), ^"71 sfl^S. ^ ^-71 ^ al^7l«- J±«£ ^ 

^H^H^ iflofl 7^§}^ ^ o]^ _£L4x <&^€ ?1 #11. 

10] 

^7) d) ^7^1^, 

#71 4^^, tfl^l ^ #7l tfltfl *f|£| #*r# ^"71 *lU ^ 

^■7i ^€ *iii ^ am^is. *h ^-7i <y-^si- 4^>^ ^-7] *ll2 

*3 frfr ^*Kr #31; 

#71 m ^ #71 A-^^ ^- 7 fl^ ^ #71 A>-g-^ #71 

A^tf|^ ^7|« ^*Hr #31; 

^-71 *H^7l, #7l sH^H, #7l rfl^7l ^ #71 7>^7> ^7^ ^X\6\] 

^#*}fe #31; ^ 
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^o] Aj^ 33 o. a a&^H 7}°^}^ Sl^V* ^m<^m #31 

11] 

*)ll0^1 5ft°W, 

<#7] e) #3HH #71 ^ A^% tl^V A 3 A <H1 ^7) 4^7|7} 
A}-^^ ^J&S. O}^ ^.i 71 ^ «<HT 

12] 

#7l a) #31^, #71 7>^7.> #^71^ ^t*V7} #3.* 32f^ X]^>7l ^«fl 

NAI (Network Access ID) %^Sc Aj-g-^ ^-f , #7l 7>^a> #^7l7V A}-g-A> jf*.^ #- 
71 A^cq ^- 7 fl7ll- Sfl^ &4 o]^. ^ #7l <?1^ A^S ^Aj*Kr ^-^ 

f^AS. *>fe ^ 71 JE^r 

13] 

qxfli i<£H(Access Point)* *«fl 7}<y7.} #^7lsq- a^ 7 > ^€ ^ ^ a] 
#7l 7>^7>V ^7lSl- Aj- 7 -| o]^ A-^tfl^ofl o]^ 7l 53.%-$r 3§-z>}*\ 

<*l^*Kr ^°11 Sl^Ai, 

a) #71 7>^A> #^7l7> #7l ^oljE^Bl ^if*}- #31; 

b) #71 7>^7> #^7l7> X\^x}<% #71 A^S} ^7fl7l» A>-§-^H A SAj€ 
7l« #7l ^--Sft #7l A^S. ^Aj*Hr #31; 
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C) #71 #7l 7\<&X\ #Tg7)^K\ *1# A>-§-^ #7l 7}<Q7$ & 

^ Sfli^H ^ #7} <?1^ A^o) ^■ 7 fl7l« \HMi #7l 
**| #71 7>«a^V ^7lS ##*Kr 

d) #71 7>«yz> ^71 7> #71 ^€ \**r4 #71 ^ tfl^l7l» A}-g-«H ^1 
*3 *Nt &4 7}<$A^t #71 <M>i i°JB« ^-n #71 ^ 
«1S ^SKr #31; 

e) #71 <^ A^ 7 > #71 *H^H., #71 tfl^7l ^ #71 \+^# A}-§-*H ^#^b *«|2 
*3 Ute Bl^ 71 S *H #71 d) #7HH <£Jl3^ ^-^>31, #71 41€ iH 

7la«*M ^-71 7><g*}^ oi^H tfltb tW^, #71 ^1^°1 ^S)*r ^-f , 

#7l #7l tfl^7l ^ ^-7fl^m A}-g-*H ^ ^i«l^ <?1^>» #71 

5L^1H» ^ #71 7}^7} ^7lS. ^4l*Kr 

f) #7l 7>^^> ^7l7> #71 tfl^7l5l- 2fl^^» A>-g-*V<3 ol^ 
ol^*H tflt!: ^W^, =L #7l ^1^ 5L*lS.» #7l ^ >H^S. 

g) #71 ^ X\»\7} #71 7>^7> Ic^lS-JfEl <£#^ ^47> 

^ o. 7 ].^^6j| tfl^ ^7}» #71 ^Afl^ i*lB» **fl #7l 7>«9^1- ^^S. ^# 

*}tt #31 

♦ o]^ ^ 71 ^-tb 91^ 

14] 

*)1 13*^1 SX^^, 
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^7} ^7]s^ #7} ^Afli AH*Wfe ^ 7}^ 

(Extensible Authentication Protocol :EAPH A"|~§-3qjL, 

<#7] <sfl^li S^IB^ a-^ a>o]oJ(]a^ RADIUS SSSf^l A>-g-S)^ 

f^AS ^ o]^ A4i ?1 *t3r ^ HJ^. 

15] 

a) #7] 7}<$Z\ ^7}7\ 7^Si\ q^Si)- #7) ^7fl?l* A>-g-^ A^A^ 

?)§ Aj-7] oi^ a^s. **l*H2- 7l^; 

b) ^"71 7>^A> #^7l7 r ^7] A^ofl^ A^A^ \H-» ^Al*}^- 71^; 

C) A>7l 4^1 € ^"71 7V^7.V Wfl ^S|<H 3^^= ^ 

» A}-g-*M ^]1 ^ &-g- ^SS^ &4 A^A^ 7><y7>^ 91^7}* ^7} 91^ A^S. 

d) ^7] 7}^A> ^7l7>, Aj-71 ^Aj^ 7><gA>^- *1^*H| tfl^ #7l A^^A^ 
A^cfl nJ-BJ. o]^ A^oflAI A^A^ ols a^s, ^A[^ 71^5 ^ 

e) 7><aA> ^7)7> Aj-7] tfl^^ ifliflS.* A}-g-*H <$7) W$ 

t°l^ 71^ 



35-31 



10^^42611 2004/7/5 
16) 

-fHHi ^ 7}<g*> T&«7W ^ -H^H-H #£• ^ ?1« 

a) #7l -8-71 7><g^> ^l^^l ^I^V^- #7l ^3 *7lM* A> 

b) #71 ^ ^1^7} #7l 7}<$X\ T&1t7]3.tt ^ AV8-^o^ #71 7><^7> ^ 
Bfli^EL $ tfl^Tl^ #71 ^ ^7fl7lf \^r» WW #71 7>^7> ^ 

«7l a ^#*Rr 71^; 

c) #71 *\*\7\, #71 \H^1 7l^«H #71 7}<g*V ^f7HA] <£ 

s.^ &4 7Va*V% °J^7}» ^#*Kr 71^; 

d) #71 tl^ *\*\7\ #71 sfl^JEL , #71 tfl%l7l ^ #71 \+^» A>-g-^^ ^#^b *fll 
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